Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/nMRk07dWYA4PNPWdy4_OneiQcnI.roa
File: nMRk07dWYA4PNPWdy4_OneiQcnI.roa (raw, json)
Hash identifier: gaGvhwXNlPpT5FkktcjaXwA95hRcq8jNbzWzYSh3XX8=
Subject key identifier: 9C:C4:64:D3:B7:56:60:0E:0F:34:F5:9D:CB:8F:CE:9D:E8:90:72:72
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019FF03447E2366C3D22AD7B77D10422535C
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/nMRk07dWYA4PNPWdy4_OneiQcnI.roa
Signing time: Tue 11 Aug 2026 09:43:05 +0000
ROA not before: Tue 11 Aug 2026 09:43:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 91.235.158.0/24 maxlen: 24
194.187.100.0/24 maxlen: 24
194.187.101.0/24 maxlen: 24
195.95.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:34:47:e2:36:6c:3d:22:ad:7b:77:d1:04:22:53:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Aug 11 09:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cc464d3b756600e0f34f59dcb8fce9de8907272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:d4:e9:05:bc:44:e1:f1:92:01:be:98:a8:
80:5e:94:7e:64:ca:4b:2f:d5:04:a8:39:42:61:1f:
ca:8b:3d:f1:7e:6f:5c:71:aa:5c:d2:c4:44:4e:15:
c9:68:e5:f5:44:db:8b:3c:53:57:67:b7:f4:79:d7:
02:38:86:fe:e8:37:09:d3:59:45:43:2a:ea:b7:15:
64:69:1e:55:b9:16:e7:1d:fa:03:4d:2d:6d:76:be:
a3:26:8f:8b:b0:31:07:94:ee:7e:93:81:c8:38:ec:
60:89:c1:80:ee:4b:8e:a3:f6:93:0d:b2:c2:df:99:
8e:b1:b9:53:50:25:79:a1:96:b0:81:37:1c:4a:e2:
08:d9:ad:9a:5e:f4:d6:de:a9:9a:5a:3b:b0:6a:ea:
04:88:fa:40:66:96:9d:51:36:c1:73:6e:1b:00:c0:
97:14:d4:24:73:6f:0d:a4:1c:b1:a9:c1:bc:21:63:
59:40:47:81:3e:17:5d:a6:da:4c:fc:c4:5f:b1:78:
41:82:0c:4f:d1:32:8c:ca:ce:3a:96:e9:d0:8d:6f:
3f:91:63:ca:82:e9:2d:67:59:8c:46:68:af:36:26:
a9:16:64:26:a0:c0:8f:c2:05:cd:39:54:55:84:46:
7d:31:5a:18:2d:a1:b7:08:1c:c8:04:cf:18:33:44:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C4:64:D3:B7:56:60:0E:0F:34:F5:9D:CB:8F:CE:9D:E8:90:72:72
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/nMRk07dWYA4PNPWdy4_OneiQcnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.158.0/24
194.187.100.0/23
195.95.216.0/24
Signature Algorithm: sha256WithRSAEncryption
85:52:fc:f9:02:07:35:2d:27:ab:a4:10:8b:aa:fd:bf:c9:e4:
dc:51:04:c1:4f:91:06:d0:fe:04:47:2d:82:b1:1b:ba:14:39:
96:e6:63:f1:f2:47:4b:03:92:8f:ac:5c:3a:77:6b:d3:bb:6b:
d1:82:5c:bb:32:9d:4d:8c:c9:72:13:f0:cb:74:4c:0a:51:e9:
8b:9b:4b:8e:18:a2:9a:5c:9a:56:b3:69:f9:4d:19:3e:05:26:
d7:e0:50:5b:0b:94:44:96:7f:7a:80:f8:19:b3:26:4b:e3:2f:
b9:ef:fd:a3:b2:c1:6b:d0:9d:61:68:4c:9b:9c:14:2a:38:02:
5f:b5:b9:16:d9:98:b3:ce:2d:4f:97:ba:c0:a3:44:84:7e:5d:
52:e4:cf:e2:d7:ec:2b:2a:1d:32:62:7e:0d:c8:6a:51:42:d9:
9c:ee:5c:96:db:e7:12:3f:dc:94:06:c1:ed:0c:66:00:43:78:
db:cd:61:b4:86:e2:0b:37:f7:0e:4c:e8:bf:e5:96:34:7f:b5:
6b:2d:43:ba:52:f8:cd:93:a7:be:db:91:59:61:4e:ad:59:7c:
e2:ff:6e:70:f8:d1:e0:da:8a:6a:b1:24:d5:27:b7:78:9f:e2:
e3:84:d1:12:6b:bb:6e:58:58:06:1c:28:40:c0:b2:30:f1:ee:
c9:14:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 16:48:34 2026 by rpki-client